Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: 38l1GtWP8nyCvriQMKo9MMyi1SIp8zaFNBluElYxPbo=
Subject key identifier: 24:B8:02:D7:37:35:8B:B8:6A:8C:5E:C9:A4:16:3B:E7:5E:DD:79:F4
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 0196C615EB5D8E221716C254DC571F21910A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 153F
Signing time: Mon 12 May 2025 20:00:47 +0000
Manifest this update: Mon 12 May 2025 20:00:47 +0000
Manifest next update: Tue 13 May 2025 20:00:47 +0000
Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: 3rh40QnU78BnIkjIzZyC6w7Gi0GHqb6zNnweqg1ZSJU=)
2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:eb:5d:8e:22:17:16:c2:54:dc:57:1f:21:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: May 12 20:00:47 2025 GMT
Not After : May 13 20:00:47 2025 GMT
Subject: CN=24b802d737358bb86a8c5ec9a4163be75edd79f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:1b:5d:53:ca:d2:59:08:8e:a8:f3:73:07:
79:03:38:03:4c:30:67:1f:08:2a:8d:cd:43:ac:e2:
d1:13:01:42:4d:dc:3c:8c:cf:ee:16:bd:52:31:7c:
a7:f9:ea:5d:d6:c6:63:34:39:60:7a:71:31:ab:72:
61:94:ba:6a:6f:37:55:e1:38:0e:70:0d:84:58:63:
d5:6e:17:43:ec:2e:be:5f:1f:76:0f:11:5e:77:09:
0e:6d:10:2c:a5:c6:84:45:80:e2:9d:79:65:e0:f5:
a4:ee:d6:9d:2b:4c:c9:15:d9:5a:69:20:4d:69:b5:
25:8d:d9:d5:5f:70:04:b0:4c:2b:d3:b3:c3:41:80:
4e:d3:14:43:4f:47:af:c1:ee:48:f7:cf:2f:19:a4:
fa:0d:19:10:d9:58:7d:ba:45:0d:3e:df:11:b8:76:
32:37:3a:bb:24:24:3c:0a:e2:87:9d:e5:cd:8e:84:
d1:4b:97:36:2e:19:a6:22:c9:37:6e:f2:88:a3:09:
e4:85:5c:13:9d:f5:c2:14:10:5e:84:da:ed:06:67:
70:e6:7d:f0:69:6b:42:2a:04:21:24:e7:a5:5e:5d:
83:26:d7:f7:19:fc:90:e5:04:5f:90:ca:68:37:89:
fa:f2:02:48:cd:9f:e7:df:a4:27:f9:9c:5d:91:0f:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:02:D7:37:35:8B:B8:6A:8C:5E:C9:A4:16:3B:E7:5E:DD:79:F4
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a4:24:22:19:74:d9:86:ab:1a:28:a0:91:31:df:39:0f:44:
96:64:80:cd:a4:3d:d9:61:5e:a6:a7:93:c6:19:5b:d0:55:94:
1a:7e:09:4e:e8:f2:94:34:48:b6:d8:6b:80:50:95:f7:b0:54:
f4:aa:36:22:61:04:4e:cd:00:c7:ce:d9:66:de:69:d8:fc:34:
a1:f3:af:dd:68:8d:b7:37:79:38:2f:d7:32:ba:34:a0:7e:4b:
49:e2:6c:fe:17:56:75:d3:e3:47:2a:92:ec:e1:ec:bb:3c:2c:
f6:9e:2c:ca:55:00:4a:c6:57:c6:ca:d7:97:2c:f0:80:0f:46:
9d:3c:7c:fe:00:80:1f:94:77:ab:7c:58:a9:cc:ba:03:cc:c8:
a7:b9:dd:9a:70:af:96:05:3a:42:f0:3d:19:36:73:94:71:c5:
6f:4f:f3:9b:c1:f8:d2:ba:ae:4b:91:e3:47:e7:3a:b3:b7:a9:
24:90:85:c7:a0:be:51:14:ea:02:ab:41:e4:ad:c3:94:a8:5f:
f6:90:35:98:76:f2:57:05:57:58:e2:88:d5:43:60:88:77:4e:
c9:ea:79:b0:b2:eb:51:c0:3c:2a:bd:3e:52:60:d5:74:31:1c:
95:e2:8a:80:b0:87:16:29:b8:a3:72:2c:08:86:f7:98:42:a1:
e8:e9:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:58:02 2025 by rpki-client